when you come to nostr, you get a set of keys, one is private and one is public....

the problem is people are plugging their private key into all different clients and apps...

this is a no-no

so there are key signers or extensions that safeguard your keys and sign into clients and apps for you. 

All the newbies are told to go to Primal, Damus, or Amethyst. And they are creating accounts this way, which I think is bad news.